goprivate

Go Module Security: sumdb, GOPROXY and Private Modules

How Go's checksum database actually protects you, where GOPROXY ordering bites, and the GOPRIVATE mistakes that leak internal module paths to public infrastructure.